RANSOMWARE VICTIMHEALTHCAREDUPLICATE CLAIM

National Health Insurance Management Authority

nova📍 KE (KE)📅 December 5, 2025
8
same group

Attack Intelligence

National Health Insurance Management Authority was compromised in a ransomware attack attributed to nova in December 2025. The organization, operating in the Healthcare sector in KE, was added to the group's data leak site as part of an extortion campaign.

nova operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

The National Health Insurance Scheme (NHIS) provides access to quality healthcare services, essential medicines, and state-of-the-art medical equipment. It aims to facilitate equitable contributions and access to healthcare for individuals and families, protecting them against catastrophic healthcare expenditures. NHIS offers a variety of benefit packages and allows companies to register their employees for coverage. The organization serves clients seeking affordable and convenient healthcare solutions - patients data exf, navigate us to deal samples provided

Additional Details

Other Victims — nova (8)

Quick Facts

CountryKE (KE)
SectorHealthcare
Attack DateDec 5, 2025
Intel Sourceransomlook
StatusDUPLICATE CLAIM

Threat Group

nova
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.